fn foo() { safe = true; }
